                                (conj dns-alt-names-list master-certname) false))
         alt-names-ext-list (if alt-names-ext [alt-names-ext] [])
         base-ext-list      [(utils/netscape-comment
-                              ns-comment)
+                              netscape-comment)
                             (utils/authority-key-identifier
                               ca-public-key false)
                             (utils/basic-constraints-for-non-ca true)

   ca-serial :- (schema/pred number?)
   ca-public-key :- (schema/pred utils/public-key?)]
  [(utils/netscape-comment
     ns-comment)
   (utils/authority-key-identifier
     ca-name ca-serial false)
   (utils/basic-constraints-for-ca)

        csr-ext-list (filter-authorized-extensions
                       (utils/get-extensions csr))
        base-ext-list [(utils/netscape-comment
                         netscape-comment)
                       (utils/authority-key-identifier
                         capub false)
                       (utils/basic-constraints-for-non-ca true)
